Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/tGevMW22OtGxpxsxrgTqDSAUMN8.roa
File: tGevMW22OtGxpxsxrgTqDSAUMN8.roa (raw, json)
Hash identifier: rAx/zLn37yVpxqkqRYbgTxJAE6PxG5chrCPx3Wh9ADk=
Subject key identifier: B4:67:AF:31:6D:B6:3A:D1:B1:A7:1B:31:AE:04:EA:0D:20:14:30:DF
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FFE1525407C84DF41CE7652A5184F
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/tGevMW22OtGxpxsxrgTqDSAUMN8.roa
Signing time: Mon 02 Jan 2023 17:38:14 +0000
ROA not before: Mon 02 Jan 2023 17:38:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205203
IP address blocks: 194.56.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:fe:15:25:40:7c:84:df:41:ce:76:52:a5:18:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b467af316db63ad1b1a71b31ae04ea0d201430df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:4d:9d:ac:a4:69:d8:43:45:c8:96:bb:f9:
b5:6c:b8:ee:50:fc:a8:9f:fb:56:43:e6:5a:89:f4:
dc:ad:f0:7d:0f:9f:b4:42:97:01:19:df:84:8f:de:
2d:9a:d6:b4:39:56:08:d5:04:4c:8d:75:19:90:72:
5a:e9:d9:fd:2d:8a:ce:23:1f:8d:0d:aa:14:89:85:
98:58:ad:fb:77:b9:1e:f6:31:d0:21:90:94:dc:52:
95:82:b2:82:d8:8e:28:79:9c:68:99:f2:91:f1:57:
d4:2a:f7:6a:a6:20:b8:2b:ca:43:1f:dc:e8:a5:97:
f9:a1:e4:ae:3f:19:0c:54:5c:64:fa:90:b2:9c:ec:
fa:37:4f:d9:0f:75:9a:31:4c:01:70:5e:2a:20:56:
7f:0f:5b:99:f8:56:30:56:d2:87:56:f9:4b:d0:c9:
c7:91:48:b2:89:af:00:f0:12:3c:84:75:c4:f9:ff:
32:02:be:e0:69:29:a1:e5:81:82:27:f6:27:f3:ea:
91:a3:3c:a7:e5:0e:d9:c5:2b:11:0b:b9:df:3d:a3:
89:5d:8c:f5:e1:73:65:df:41:c6:ff:03:5d:dd:4b:
98:66:e8:3f:f1:ea:e7:63:d6:f6:65:2f:5b:21:37:
39:27:d8:6d:f7:05:a5:f9:b1:b5:05:99:6a:cf:a0:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:67:AF:31:6D:B6:3A:D1:B1:A7:1B:31:AE:04:EA:0D:20:14:30:DF
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/tGevMW22OtGxpxsxrgTqDSAUMN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:63:67:3e:f0:65:5c:e2:71:af:3a:89:30:97:43:4c:86:9b:
22:01:d0:f0:ed:55:dd:f2:38:4c:37:22:f9:0c:c9:17:fe:7f:
ea:9a:f1:3d:e1:66:94:d7:3e:9c:46:10:ab:f6:c4:89:06:b5:
ab:25:81:16:3c:7d:2f:b2:8e:ec:66:31:fd:b0:00:4f:a4:63:
26:04:42:62:2b:45:19:5b:90:9b:fe:93:d1:1c:75:86:dd:fc:
b6:73:b9:5b:e0:ea:a3:4f:f2:7b:17:41:46:95:f2:d4:de:4e:
7c:c4:f7:a6:36:ae:57:e8:d6:36:7f:b0:36:3a:1c:fa:fa:f3:
ad:b5:39:36:d0:54:2e:37:2e:c1:c5:e4:73:a4:8e:dc:27:07:
02:b4:f4:6b:13:ad:c4:4f:6f:1a:e7:4a:0d:81:da:92:45:4e:
97:d0:ce:3a:ff:06:4b:6a:53:b1:2c:47:d9:c6:69:dd:87:4a:
38:da:b7:00:0e:2b:4e:97:6b:5e:6e:47:8d:9f:d7:e1:7d:c1:
5e:db:88:ef:b6:7f:14:87:cd:0e:7a:e7:01:07:b4:8c:c9:a6:
c8:5a:ef:a1:bd:f3:de:da:36:c2:74:2d:0e:ef:b9:52:c5:59:
d3:e9:bd:61:c4:b3:58:90:d3:23:48:e4:b0:0a:cb:2f:0d:81:
e9:ea:19:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:34 2024 by rpki-client on console-ams.rpki-client.org